Roadmap

What comes next, in the order it pays off. Each list is the "Next" section of its package's plan, included here from the package README, so it is the same list in both places. What is already done is in the changelog.

Receipts

The first three close the gap between a log the operator cannot rewrite and a record the operator cannot shape.

1. Run the anchor for log.agent-custody.dev on mainnet: a funded key held only by the anchor service on the host, its records served beside the checkpoints, its address and each tenant's log id published in the welcome sheet and on the security page, and the monitor checking it. The code is done. Issue #176.
2. Completeness beyond Stripe: the same check over GitHub's actions, and over on-chain transfers out of an agent's wallet, where the chain itself lists every transfer. Issue #178.
3. A TEE gateway: a confidential container with a reproducible, attested build, the signing key generated and kept in the enclave, TLS ending inside it, and both verifiers checking the path from the receipt key, through the attestation, to the release. It replaces the TEE-hosted signer planned before. Issue #179.
4. Run the witness for log.agent-custody.dev on a machine and under an account that is not ours, and require it in the welcome sheet. The code is done; what it needs is a second operator. Issue #116.
5. Post-quantum signatures: ML-DSA beside Ed25519 in the same DSSE envelope, hybrid by default when a PQ key is present, in every signed artefact and in the browser verifier. Issue #11.
6. Receiver attestation for agent-to-agent calls: the delegate signs its answer for the receipt, as a signing upstream does today.
7. SD-JWT redaction, then ZK proofs of policy compliance. Not before.

Fact ledger

1. The hosted plane, behind early access: tenanted log, then memory, then reports and a control plane, with SSO, SCIM, residency, and SIEM export. Issue #6.

Planned designs

Designs written down and not built yet. Each page says so at the top.

• Payment mandates and agent identity (planned): fitting the grant and the receipt to the payment networks' agent standards.